<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Related to tainted kernel, I faced the same issue when I deployed
      rtpengine on a Suse Enterprise many months ago, so I do not really
      remember the exact steps, but there is a way to disable the check
      of signed kernel modules (iirc, these are only the ones coming
      from the kernel source tree, so if you need to load any external
      kernel module, you have to disable this option).</p>
    <p>Quick check on the net, it may have to do with module.sig_enforce
      option for kernel loading.</p>
    <p>Cheers,<br>
      Daniel<br>
    </p>
    <div class="moz-cite-prefix">On 11.09.20 21:31, Andrew Chen wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAEytwJ1jE92CFnJ+_8hOmTw+z1QUSH4vx3-yhMP-UJqHPUOSpg@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div dir="ltr">
          <div dir="ltr">Sorry let me clarify this line here:
            <div><br>
            </div>
            <div>"...at the time, I was running an older version 8.0.x
              so I recompiled all the ngcp packages under this kernel
              and completed the installation without issues.."</div>
            <div><br>
            </div>
            <div>8.0.x is the older ngcp version. I recompiled version
              9.0.1.0 under that new kernel version 5.3.0-1035-aws
              #37-Ubuntu</div>
            <div><br>
            </div>
          </div>
        </div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Fri, Sep 11, 2020 at 3:29
          PM Andrew Chen <<a href="mailto:achen@fuze.com"
            moz-do-not-send="true">achen@fuze.com</a>> wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px
          0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div dir="ltr">
            <div dir="ltr">
              <div dir="ltr">
                <div dir="ltr">
                  <div dir="ltr">Thanks Alex.
                    <div><br>
                    </div>
                    <div>So it turns out my rtpengine stopped working
                      after our latest kernel upgrade to:</div>
                    <div><br>
                    </div>
                    <div>
                      <div>Linux sjomainrtpe30 5.3.0-1035-aws #37-Ubuntu
                        SMP Sun Sep 6 01:17:09 UTC 2020 x86_64 x86_64
                        x86_64 GNU/Linux</div>
                    </div>
                    <div><br>
                    </div>
                    <div>at the time, I was running an older version
                      8.0.x so I recompiled all the ngcp packages under
                      this kernel and completed the installation without
                      issues.</div>
                    <div><br>
                    </div>
                    <div>As soon as we started making test calls, I
                      received 0 audio from those test endpoints. 
                      Looking at the rtpengine logs, I see several
                      messages that's quite concerning:</div>
                    <div><br>
                    </div>
                    <div>
                      <div>Sep 11 18:43:41 sjomainrtpe30 kernel: [ 
                         13.434623] xt_RTPENGINE: loading out-of-tree
                        module taints kernel.</div>
                      <div>Sep 11 18:43:41 sjomainrtpe30 kernel: [ 
                         13.434670] xt_RTPENGINE: module verification
                        failed: signature and/or required key missing -
                        tainting kernel</div>
                      <div>Sep 11 18:43:41 sjomainrtpe30 kernel: [ 
                         13.434938] Registering xt_RTPENGINE module -
                        version 9.0.1.0+0~mr9.0.1.0</div>
                    </div>
                    <div><br>
                    </div>
                    <div>and</div>
                    <div><br>
                    </div>
                    <div>
                      <div>Sep 11 18:49:50 sjomainrtpe30
                        rtpengine[1030]: WARNING:
                        [2-7859@2600:1f1c:4ff:3e01:f64d:2f67:c0fa:c931
                        port 50000]: No support for kernel packet
                        forwarding available (decryption cipher or HMAC
                        not supported by kernel module)</div>
                    </div>
                    <div><br>
                    </div>
                    <div>which I assume is due to the first error I
                      pasted.</div>
                    <div><br>
                    </div>
                    <div>So I tried</div>
                    <div><br>
                    </div>
                    <div>- rebooting the system which maybe the module
                      wasn't loaded properly.</div>
                    <div>- I reran modprobe to make sure the module is
                      installed</div>
                    <div>- I ran some dkms command to see if any error
                      pop up due to the kernel version I'm running and I
                      see no errors:</div>
                    <div><br>
                    </div>
                    <div>
                      <div>dkms status</div>
                      <div>falco, 0.20.0+d77080a, 5.3.0-1032-aws,
                        x86_64: installed</div>
                      <div>falco, 0.20.0+d77080a, 5.3.0-1035-aws,
                        x86_64: installed</div>
                      <div>ngcp-rtpengine, 9.0.1.0+0~mr9.0.1.0,
                        5.3.0-1032-aws, x86_64: installed</div>
                      <div>ngcp-rtpengine, 9.0.1.0+0~mr9.0.1.0,
                        5.3.0-1035-aws, x86_64: installed</div>
                      <div><br>
                      </div>
                    </div>
                    <div>So I'm running out of options.</div>
                    <div><br>
                    </div>
                    <div>Any advice?</div>
                    <div><br>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
          <br>
          <div class="gmail_quote">
            <div dir="ltr" class="gmail_attr">On Fri, Sep 11, 2020 at
              3:17 PM Alex Balashov <<a
                href="mailto:abalashov@evaristesys.com" target="_blank"
                moz-do-not-send="true">abalashov@evaristesys.com</a>>
              wrote:<br>
            </div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
              0.8ex;border-left:1px solid
              rgb(204,204,204);padding-left:1ex">There is an RTPEngine
              mailing list, I believe, but RTPEngine questions <br>
              are often posed here given its close association with
              Kamailio. What's <br>
              going on?<br>
              <br>
              On 9/11/20 2:57 PM, Andrew Chen wrote:<br>
              > Hey guys,<br>
              > <br>
              > Is this the right place to ask about rtpengine (ngcp)
              related issues <br>
              > with kernel packet forwarding?<br>
              > <br>
              > Thanks.<br>
              > <br>
              > -- <br>
              > Andy Chen<br>
              > Sr. Telephony Lead Engineer<br>
              > achen@ <mailto:<a
                href="mailto:achen@thinkingphones.com" target="_blank"
                moz-do-not-send="true">achen@thinkingphones.com</a>><a
                href="http://fuze.com" rel="noreferrer" target="_blank"
                moz-do-not-send="true">fuze.com</a> <<a
                href="http://fuze.com" rel="noreferrer" target="_blank"
                moz-do-not-send="true">http://fuze.com</a>><br>
              > <br>
              > <br>
              > <br>
              > *Confidentiality Notice: The information contained in
              this e-mail and any<br>
              > attachments may be confidential. If you are not an
              intended recipient, you<br>
              > are hereby notified that any dissemination,
              distribution or copying of this<br>
              > e-mail is strictly prohibited. If you have received
              this e-mail in error,<br>
              > please notify the sender and permanently delete the
              e-mail and any<br>
              > attachments immediately. You should not retain, copy
              or use this e-mail or<br>
              > any attachment for any purpose, nor disclose all or
              any part of the<br>
              > contents to any other person. Thank you.*<br>
              > <br>
              > _______________________________________________<br>
              > Kamailio (SER) - Users Mailing List<br>
              > <a href="mailto:sr-users@lists.kamailio.org"
                target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a><br>
              > <a
                href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
              > <br>
              <br>
              -- <br>
              Alex Balashov | Principal | Evariste Systems LLC<br>
              <br>
              Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free)<br>
              Web: <a href="http://www.evaristesys.com/"
                rel="noreferrer" target="_blank" moz-do-not-send="true">http://www.evaristesys.com/</a>,
              <a href="http://www.csrpswitch.com/" rel="noreferrer"
                target="_blank" moz-do-not-send="true">http://www.csrpswitch.com/</a><br>
              <br>
              _______________________________________________<br>
              Kamailio (SER) - Users Mailing List<br>
              <a href="mailto:sr-users@lists.kamailio.org"
                target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a><br>
              <a
                href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users"
                rel="noreferrer" target="_blank" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
            </blockquote>
          </div>
          <br clear="all">
          <div><br>
          </div>
          -- <br>
          <div dir="ltr">
            <div dir="ltr">
              <div>
                <div dir="ltr">
                  <div dir="ltr" style="font-size:12.8px">Andy Chen</div>
                  <div dir="ltr" style="font-size:12.8px">
                    <div>Sr. Telephony Lead Engineer</div>
                    <div>415 516 5535 (M)</div>
                    <div><a href="mailto:achen@thinkingphones.com"
                        target="_blank" moz-do-not-send="true">achen@</a><a
                        href="http://fuze.com" target="_blank"
                        moz-do-not-send="true">fuze.com</a></div>
                    <div><br>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </blockquote>
      </div>
      <br clear="all">
      <div><br>
      </div>
      -- <br>
      <div dir="ltr" class="gmail_signature">
        <div dir="ltr">
          <div>
            <div dir="ltr">
              <div dir="ltr" style="font-size:12.8px">Andy Chen</div>
              <div dir="ltr" style="font-size:12.8px">
                <div>Sr. Telephony Lead Engineer</div>
                <div>415 516 5535 (M)</div>
                <div><a href="mailto:achen@thinkingphones.com"
                    target="_blank" moz-do-not-send="true">achen@</a><a
                    href="http://fuze.com" target="_blank"
                    moz-do-not-send="true">fuze.com</a></div>
                <div><br>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">*Confidentiality
        Notice: The information contained in this e-mail and any</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">attachments
        may be confidential. If you are not an intended recipient, you</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">are
        hereby notified that any dissemination, distribution or copying
        of this</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">e-mail
        is strictly prohibited. If you have received this e-mail in
        error,</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">please
        notify the sender and permanently delete the e-mail and any</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">attachments
        immediately. You should not retain, copy or use this e-mail or</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">any
        attachment for any purpose, nor disclose all or any part of the</span><br
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
      <span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">contents
        to any other person. Thank you.*</span>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
  </body>
</html>